What is the primary purpose of data security in an organization?

To ensure that data is accessible to all employees at all times

To reduce the cost of data storage hardware

To protect data from unauthorized access, use, disclosure, disruption, modification, or destruction

To maximize the speed of data transmission across networks

A company's network was breached, and the attacker exfiltrated customer data. The investigation reveals that the attacker used a compromised employee account to access the data. The employee had clicked on a phishing link that installed malware. Which combination of controls would have most likely prevented this attack?

Use a strong password policy and require password changes every 30 days.

Install antivirus software on all endpoints.

Disable all external email access.

Implement multi-factor authentication (MFA) and provide security awareness training on phishing.

A company is implementing a data retention policy. They have legal requirements to retain financial records for 7 years, but they also want to minimize the risk of data breaches. Which approach best balances compliance and security?

Store all data in a public cloud to reduce costs.

Delete financial records after 3 years to reduce storage costs.

Retain all data indefinitely to avoid any legal issues.

Retain financial records for 7 years in an encrypted, access-controlled archive, and securely delete all other data when no longer needed.

A hospital's IT department is creating a data handling policy. They have three categories: patient medical records, employee contact lists, and the cafeteria menu. Which protection measure is most appropriate for the patient medical records?

Encrypt the files and restrict access to authorized clinical staff only.

Store the records in a locked drawer in the HR manager's office.

Post the records on the internal shared drive with read-only access for all employees.

Email the records to the department heads for their review.

EC-CouncilCertified Secure Computer User

Domain 1Objective 1

Introduction to Data Security CSCU Practice Questions (Page 7)

Part of the Data and Operating System Security domain, which makes up ~25% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 4–7 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

5concepts

Questions 31–35

31foundation · easy
What is the primary purpose of data security in an organization?
Select an answer first
32expert · hard
A company's network was breached, and the attacker exfiltrated customer data. The investigation reveals that the attacker used a compromised employee account to access the data. The employee had clicked on a phishing link that installed malware. Which combination of controls would have most likely prevented this attack?
Select an answer first
33foundation · easy
Which data protection principle ensures that data is not altered or corrupted by unauthorized parties?
Select an answer first
34expert · hard
A company is implementing a data retention policy. They have legal requirements to retain financial records for 7 years, but they also want to minimize the risk of data breaches. Which approach best balances compliance and security?
Select an answer first
35application · medium
A hospital's IT department is creating a data handling policy. They have three categories: patient medical records, employee contact lists, and the cafeteria menu. Which protection measure is most appropriate for the patient medical records?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSCU

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSCU” is a trademark of its owner, used for identification only.

Introduction to Data Security CSCU Practice Questions (Page 7)

Questions 31–35

What is the primary purpose of data security in an organization?

Which data protection principle ensures that data is not altered or corrupted by unauthorized parties?

A company is implementing a data retention policy. They have legal requirements to retain financial records for 7 years, but they also want to minimize the risk of data breaches. Which approach best balances compliance and security?

A hospital's IT department is creating a data handling policy. They have three categories: patient medical records, employee contact lists, and the cafeteria menu. Which protection measure is most appropriate for the patient medical records?

Keep studying — Data and Operating System Security